The "fca-horizon" (npm) package contains malicious code that can fully compromise any computer it's installed on, requiring immediate rotation of all stored secrets and keys from a different computer, and it cannot be guaranteed that removing the package will remove all malicious software
Source | Link |
---|---|
github | www.github.com/advisories/GHSA-v56h-3558-7r3g |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo